Minna, I want to block ads for my whole family actually~ we all use phones on 4G so pi-hole at home does nothing for mobile (´・ω・｀). I basically want to run pi-hole on cloud VPS and tunnel everything with WireGuard. Is this actually good idea? My hos is at Vultr, very cheap plan. I tried to install but port 53 maybe blocked? Sorry for bad english~
Member
This is a common and reasonably well-supported architecture. Two considerations merit attention.
First, verify that your provider does not filter destination port 53 outbound. Some virtual server products are implemented as shared hosting with marketing language that obscures this limitation. Test with netcat before investing configuration effort.
Second, WireGuard in a hub-and-spoke topology will add approximately 5-15% overhead to DNS query latency. For mobile applications this is typically acceptable. Your DNS server should listen on a non-standard port internally and you should redirect with iptables or nftables.
🍜
Cloud pi-hole is fun but you need hardening dont forget fail2ban on wg port blocklists are heavy memory kills cheap vps I run mine on 1gb and it sweats
Also check if your hos allows 53 some fake vps are just shared hos with sudo very bad
